Return Nextcloud version, maintenance state, and instance ID.

Get or set maintenance mode. Omit enable to query current state; pass True/False to change it.

List all apps or enable/disable a specific app by name.

Read a system or per-app config value. app_name required when scope='app'.

Write a system or per-app config value. Incorrect values can break Nextcloud — prefer config_get before changing.

Scan the filesystem and update the file cache. Provide path (e.g. 'alice/files/Documents') or set all_users=True.

Remove orphaned file cache entries.

Add missing database indices. Safe to run at any time; recommended after upgrades.

Convert filecache IDs to bigint. Required after large installs or major upgrades.

Query background job mode ('mode') or trigger a worker run ('run'). 'run' executes one pass of the background job queue.

Check for available Nextcloud core or app updates.

Run Nextcloud security advisory check against known CVEs.

Rebuild the full-text search index (OpenSearch). Set reset=True to wipe the index before reindexing.

List configured external storage mounts as JSON.

Run the notify_push self-test to verify push notification connectivity.

Return the last N lines of nextcloud.log.

Run an overall Nextcloud system health check.

List Nextcloud users. Optionally filter by search string.

Create a new Nextcloud user account.

Enable or disable a Nextcloud user. disable=True to disable, False to re-enable.

Create a new Nextcloud user group.

Add a user to an existing Nextcloud group.

Generate an app password for a user via occ. Returns the password to the caller — never stored or logged by this server. Store it securely (e.g. Vault) immediately after receiving it.

List files/directories at a WebDAV path for the given user. Returns raw WebDAV XML (PROPFIND response).

Download a file. Returns base64-encoded content.

Upload a file. content_b64 must be base64-encoded bytes. Creates the file if it does not exist, overwrites if it does.

Move or rename a file or directory within the user's WebDAV space.

Delete a file or directory from the user's WebDAV space.

Create a share via OCS. Authenticated as the admin user. For user/group shares (type 0/1), provide share_with. expire_date format: YYYY-MM-DD.

List shares. Optionally filter by file path.

Delete a share by its ID.